Commit 4a46a26e authored by Evan Read's avatar Evan Read

Merge branch 'russell/improve-vulnerability-to-jira-issue-docs' into 'master'

Improves Jira instructions

See merge request gitlab-org/gitlab!54780
parents 71080f17 5de52e2f
...@@ -19,8 +19,7 @@ Each security vulnerability in a project's [Vulnerability Report](../vulnerabili ...@@ -19,8 +19,7 @@ Each security vulnerability in a project's [Vulnerability Report](../vulnerabili
On the vulnerability's page, you can: On the vulnerability's page, you can:
- [Change the vulnerability's status](#change-vulnerability-status). - [Change the vulnerability's status](#change-vulnerability-status).
- [Create a GitLab issue](#create-a-gitlab-issue-for-a-vulnerability). - [Create an issue](#create-an-issue-for-a-vulnerability).
- [Create a Jira issue](#create-a-jira-issue-for-a-vulnerability).
- [Link issues to the vulnerability](#link-gitlab-issues-to-the-vulnerability). - [Link issues to the vulnerability](#link-gitlab-issues-to-the-vulnerability).
- [Automatically remediate the vulnerability](#automatically-remediate-the-vulnerability), if an - [Automatically remediate the vulnerability](#automatically-remediate-the-vulnerability), if an
automatic solution is available. automatic solution is available.
...@@ -40,7 +39,21 @@ the following values: ...@@ -40,7 +39,21 @@ the following values:
A timeline shows you when the vulnerability status has changed A timeline shows you when the vulnerability status has changed
and allows you to comment on a change. and allows you to comment on a change.
## Create a GitLab issue for a vulnerability ## Create an issue for a vulnerability
From a vulnerability's page you can create an issue to track all action taken to resolve or
mitigate it.
From a vulnerability you can create either:
- [A GitLab issue](#create-a-gitlab-issue-for-a-vulnerability) (default).
- [A Jira issue](#create-a-jira-issue-for-a-vulnerability).
Creating a Jira issue requires that
[Jira integration](../../project/integrations/jira_integrations.md) is enabled on the project. Note
that when Jira integration is enabled, the GitLab issue feature is not available.
### Create a GitLab issue for a vulnerability
To create a GitLab issue for a vulnerability: To create a GitLab issue for a vulnerability:
...@@ -50,7 +63,7 @@ To create a GitLab issue for a vulnerability: ...@@ -50,7 +63,7 @@ To create a GitLab issue for a vulnerability:
An issue is created in the project, prepopulated with information from the vulnerability report. An issue is created in the project, prepopulated with information from the vulnerability report.
The issue is then opened so you can take further action. The issue is then opened so you can take further action.
## Create a Jira issue for a vulnerability ### Create a Jira issue for a vulnerability
> - [Introduced](https://gitlab.com/groups/gitlab-org/-/epics/4677) in GitLab 13.9. > - [Introduced](https://gitlab.com/groups/gitlab-org/-/epics/4677) in GitLab 13.9.
> - It's [deployed behind a feature flag](../../../user/feature_flags.md), enabled by default. > - It's [deployed behind a feature flag](../../../user/feature_flags.md), enabled by default.
...@@ -64,9 +77,9 @@ This feature might not be available to you. Check the **version history** note a ...@@ -64,9 +77,9 @@ This feature might not be available to you. Check the **version history** note a
Prerequisites: Prerequisites:
- [Enable Jira integration for vulnerabilities](../../project/integrations/jira.md). - [Enable Jira integration](../../project/integrations/jira.md).
Select **Enable Jira issues creation from vulnerabilities** when configuring the integration. The **Enable Jira issues creation from vulnerabilities** option must be selected as part of the configuration.
- A Jira user account with permission to create issues in the target project. - Each user must have a personal Jira user account with permission to create issues in the target project.
To create a Jira issue for a vulnerability: To create a Jira issue for a vulnerability:
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment